Configuring Authentication

You can authenticate your connection to Salesforce Marketing Cloud by specifying an access token, or by providing your Salesforce Marketing Cloud credentials so that the connector retrieves and uses the corresponding access token.

For detailed configuration instructions, see the following sections:

• Configuring Authentication With an Access Token
• Configuring Authentication With Your Salesforce Marketing Cloud Credentials

Configuring Authentication With an Access Token

If you already have a valid access token, specify it in your DSN so that the connector can use it to authenticate the connection.

To configure authentication with an access token:

1. To access authentication options, open the ODBC Data Source Administrator where you created the DSN, select the DSN, and then click Configure.
2. From the Method drop-down list, select one of the following settings, depending on the type of package and integration that was used to set up your Salesforce Marketing Cloud application:

Salesforce Marketing Cloud Package Type	Integration Type	Method Value
Legacy	N/A	OAuth_2.0
Enhanced	Server-to-server	Enhanced sts OAuth 2.0
	Web/Public app	Enhanced OAuth 2.0

For information about Salesforce Marketing Cloud package types, see "Installed Package Types" in the Marketing Cloud Package Development: https://developer.salesforce.com/docs/atlas.en-us.mc-app-development.meta/mc-app-development/installed-package-types.htm.

3. In the Access Token field, type your access token.
4. To save your settings and close the DSN Setup dialog box, click OK.

Configuring Authentication With Your Salesforce Marketing Cloud Credentials

You can configure the connector to retrieve and use an access token based on your Salesforce Marketing Cloud credentials.

The specific credentials that you need to provide varies depending on whether your Salesforce Marketing Cloud application was installed using a legacy package or an enhanced package, and depending on the type of integration that was used. For information about Salesforce Marketing Cloud package types, see "Installed Package Types" in the Marketing Cloud Package Development: https://developer.salesforce.com/docs/atlas.en-us.mc-app-development.meta/mc-app-development/installed-package-types.htm.

For detailed connector configuration instructions, see the section below that is appropriate for your Salesforce Marketing Cloud setup:

Salesforce Marketing Cloud Package Type	Integration Type	Connector Configuration Instructions
Legacy	N/A	Retrieving Access Tokens for Legacy Packages or Enhanced Packages with Server-to-Server Integrations
Enhanced	Server-to-server	Retrieving Access Tokens for Legacy Packages or Enhanced Packages with Server-to-Server Integrations
	Web/Public app	Retrieving Access Tokens for Enhanced Packages with Web App or Public App Integrations

Retrieving Access Tokens for Legacy Packages or Enhanced Packages with Server-to-Server Integrations

You can configure the connector to retrieve and use an access token based on your credentials for a Salesforce Marketing Cloud application that was installed using either a legacy package or an enhanced package with server-to-server integration. To do this, specify the appropriate authentication method as well as the client ID and client secret associated with the Salesforce Marketing Cloud application.

To retrieve an access token for a legacy package or a enhanced package with server-to-server integration:

1. To access authentication options, open the ODBC Data Source Administrator where you created the DSN, select the DSN, and then click Configure.
2. From the Method drop-down list, select one of the following settings:
   • If you are authenticating to a legacy package, select OAuth_2.0.
   • Or, if you are authenticating to an enhanced package with server-to-server integration, select Enhanced sts OAuth 2.0.
3. In the Client ID field, type the client ID associated with the Salesforce Marketing Cloud application.
4. In the Client Secret field, type the client secret associated with the Salesforce Marketing Cloud application.
5. Click Get Access Token.
6. In the DSN Setup dialog box, confirm that the Access Token field is populated. Then, close the browser window.
7. To save your settings and close the DSN Setup dialog box, click OK.

Retrieving Access Tokens for Enhanced Packages with Web App or Public App Integrations

You can configure the connector to retrieve and use an access token based on your credentials for a Salesforce Marketing Cloud application that was installed using an enhanced package with either web app or public app integration. To do this, start by configuring your Salesforce Marketing Cloud application to use the supported redirect URL, and updating the hosts file on your Windows machine. Then, in your DSN, specify the credentials associated with your Salesforce Marketing Cloud application and provide SSL files for encrypting the token retrieval process.

For detailed instructions, see the following:

1. Specifying the Redirect URL in Your Application
2. Updating the hosts File
3. Retrieving the Access Token

Specifying the Redirect URL in Your Application

If you are using the connector to retrieve an access token, you must configure your Salesforce Marketing Cloud application to use https://www.localhost.com:6367 as the redirect URL.

To specify the redirect URL in your application:

1. In a web browser, navigate to the Salesforce Marketing Cloud dashboard.
2. Sign in to your account, and access your application settings.
3. Set the redirect URL of the application to https://www.localhost.com:6367.
4. Save your changes, and sign out from your account.

Updating the hosts File

You must also update the host name mappings in the hosts file on your Windows machine.

To update the hosts file:

1. In a text editor, open the C:\Windows\System32\drivers\etc\hosts file for editing.
2. On a new line, type the following:

127.0.0.1 www.localhost.com

3. Save your changes, and close the file.

Retrieving the Access Token

After completing the configurations described above, you can configure the connector to retrieve and use the access token to authenticate your connection. In your DSN, specify the appropriate authentication method as well as the redirect URL, client ID, and client secret associated with the Salesforce Marketing Cloud application. You must also provide an SSL certificate and a private key for proving the identity of the client (in this case, the connector) to the Salesforce Marketing Cloud server.

To retrieve the access token:

1. To access authentication options, open the ODBC Data Source Administrator where you created the DSN, select the DSN, and then click Configure.
2. From the Method drop-down list, select Enhanced OAuth 2.0.
3. In the Client ID field, type the client ID associated with the Salesforce Marketing Cloud application.
4. In the Client Secret field, type the client secret associated with the Salesforce Marketing Cloud application.
5. In the Redirect URI field, type https://www.localhost.com:6367.
6. Provide the required SSL files by doing the following:
   1. In the Local Server Certificate field, type the full path and name of a .pem file containing the SSL certificate used to prove the identity of the client (in this case, the connector) to the Salesforce Marketing Cloud server.
   2. In the Local Server Key field, type the full path and name of a .pem file containing the private key used to encrypt the SSL certificate.
7. Click Get Access Token.
8. In the web browser that opens, in the displayed fields, type your Salesforce Marketing Cloud account user name and password. Then, click Sign In to allow the connector to access your Salesforce Marketing Cloud data store.
9. Select the application you want to sign in to, and then click Connect.

Note:

If you specified a self-signed certificate during step 7, your browser displays a security warning after you click Connect. To complete the authentication process, you must add a security exception for the certificate to your browser. For detailed instructions, refer to the product documentation for your browser.

10. In the DSN setup dialog box, confirm that the Access Token field is populated. Then, close the browser window.
11. To save your settings and close the DSN Setup dialog box, click OK.

Related topics

• Creating a Data Source Name
• Configuring SSL Verification
• Configuring Logging Options
• Connector Configuration Options